Howdy everybody! We recently shipped weekly releases which implement the
telemetry collection described by JEP-214 [0].

Behind the scenes of JEP-214, I have implemented and deployed a tool called
Uplink[1] for capturing and making this telemetry data accessible to Jenkins
project developers.

Before I can make this data access however, I want to get two critical policies
in place to ensure positive privacy practices:

 * Privacy Policy:  this document would explain to Jenkins users our practices
   on collecting, persisting, and analyzing data collected by Jenkins. This
   end-user education is incredibly important to me.

 * Reasonable Use Policy:  this document would explain to Jenkins contributors
   our policies for _their_ access to data collected from Jenkins instances.
   This would outline how collected data may be used, and how it may not be
   used. Contributors would be required to agree to this policy before gaining
   access to the collected data. Failure to comply with this policy would be
   something quite serious to me, and (in my opinion) would warrant revocation
   of access to collected data, and potentially other access grants within the
   project. User trust is important!


There are two privacy policies which I was recommended which may be useful in
defining our own:

 * KDE's Telemetry Policy: https://community.kde.org/Policies/Telemetry_Policy
 * MetaBrainz's Privacy Policy: https://metabrainz.org/privacy


I am curious if you all have other privacy or reasonable use policies from open
source projects which you find particularly well defined, and therefore worth
emulating?


I hope to smash this into a couple of JEPs after I get some more samples to
read through! :)


Cheers

[0] https://github.com/jenkinsci/jep/blob/master/jep/214/README.adoc
[1] https://github.com/jenkins-infra/uplink/


--
GitHub:  https://github.com/rtyler
Twitter: https://twitter.com/agentdero

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/20181017195601.GO12208%40grape.brokenco.de.
For more options, visit https://groups.google.com/d/optout.

Attachment: signature.asc
Description: PGP signature

Reply via email to